CVE-2026-43261
Estado: AnalizadaMedia (5.5)—
In the Linux kernel, the following vulnerability has been resolved:
arm64: Add support for TSV110 Spectre-BHB mitigation
The TSV110 processor is vulnerable to the Spectre-BHB (Branch History Buffer) attack, which can be exploited to leak information through branch prediction side channels. This commit adds the MIDR of TSV110 to the list for software mitigation.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Puntuación base: 5.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.16%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- NVD-CWE-noinfo
Referencias
- https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0
- https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422
- https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8
- https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb
- https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440
- https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5
- https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95
- https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-43261",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "e192c8baa69ac8a5585d61ac535aa1e5eb795e80",
"lessThan": "598c11dd4f4a9de31d854fcb9702f54c1c70f0d0",
"versionType": "git"
},
{
"status": "affected",
"version": "4bbfd0c280254b273c564767021bb9b0f945148e",
"lessThan": "a8d0ad5d990b050a6db74218a34b5529085e16b8",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "cccf96c49f61e47d9332d6a4d1c7fe9a2df44440",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "fd7e360845d331f542854d552469544182e61134",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "5dbe1f14359735fa50ba0dd4a496125b5bc7f422",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "fd51d47fcacec3ca027eb65d8c44853d3b6cea95",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "ad0c356cae164ed5dbd1f4cfd438e46faa5292cb",
"versionType": "git"
},
{
"status": "affected",
"version": "558c303c9734af5a813739cd284879227f7297d2",
"lessThan": "e3baa5d4b361276efeb87b20d8beced451a7dbd5",
"versionType": "git"
},
{
"status": "affected",
"version": "4dd8aae585a51a1d276911fe19096ad90144e9fe",
"versionType": "git"
},
{
"status": "affected",
"version": "3e3904125fccd042fda24294624e8f66699fd06d",
"versionType": "git"
},
{
"status": "affected",
"version": "c20d551744797000c4af993f7d59ef8c69732949",
"versionType": "git"
},
{
"status": "affected",
"version": "9013fd4bc958b33c3b4d5a2eaf4ded9857600395",
"versionType": "git"
},
{
"status": "affected",
"version": "0b2bf1b37b5ebd90e69e30d8c2d6e1cd0c1f37b4",
"versionType": "git"
},
{
"status": "affected",
"version": "5.10.105",
"lessThan": "5.10.252",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.15.28",
"lessThan": "5.15.202",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.9.310",
"lessThan": "4.10",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.14.275",
"lessThan": "4.15",
"versionType": "semver"
},
{
"status": "affected",
"version": "4.19.236",
"lessThan": "4.20",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.4.186",
"lessThan": "5.5",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.16.14",
"lessThan": "5.17",
"versionType": "semver"
}
],
"programFiles": [
"arch/arm64/kernel/proton-pack.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.17"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.17",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.10.252",
"versionType": "semver",
"lessThanOrEqual": "5.10.*"
},
{
"status": "unaffected",
"version": "5.15.202",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.1.165",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.6.128",
"versionType": "semver",
"lessThanOrEqual": "6.6.*"
},
{
"status": "unaffected",
"version": "6.12.75",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.16",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "6.19.6",
"versionType": "semver",
"lessThanOrEqual": "6.19.*"
},
{
"status": "unaffected",
"version": "7.0",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/arm64/kernel/proton-pack.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-05-06T12:16:47.003",
"references": [
{
"url": "https://git.kernel.org/stable/c/598c11dd4f4a9de31d854fcb9702f54c1c70f0d0",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5dbe1f14359735fa50ba0dd4a496125b5bc7f422",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/a8d0ad5d990b050a6db74218a34b5529085e16b8",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/ad0c356cae164ed5dbd1f4cfd438e46faa5292cb",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/cccf96c49f61e47d9332d6a4d1c7fe9a2df44440",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/e3baa5d4b361276efeb87b20d8beced451a7dbd5",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fd51d47fcacec3ca027eb65d8c44853d3b6cea95",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fd7e360845d331f542854d552469544182e61134",
"tags": [
"Patch"
],
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\narm64: Add support for TSV110 Spectre-BHB mitigation\n\nThe TSV110 processor is vulnerable to the Spectre-BHB (Branch History\nBuffer) attack, which can be exploited to leak information through\nbranch prediction side channels. This commit adds the MIDR of TSV110\nto the list for software mitigation."
}
],
"lastModified": "2026-06-17T10:49:15.847",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2770DCE-CDE6-4088-B12D-5CE167E99137",
"versionEndExcluding": "5.10.252",
"versionStartIncluding": "5.10.105"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4002FC2B-1456-4666-B240-0EBF590C4671",
"versionEndExcluding": "5.15.202",
"versionStartIncluding": "5.11"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "797C7F46-D0BE-4FB8-A502-C5EF8E6B6654",
"versionEndExcluding": "6.1.165",
"versionStartIncluding": "5.16"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "851E9353-6C09-4CC9-877E-E09DB164A3C2",
"versionEndExcluding": "6.6.128",
"versionStartIncluding": "6.2"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BCE16369-98ED-41CF-8995-DFDC10B288D2",
"versionEndExcluding": "6.12.75",
"versionStartIncluding": "6.7"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4B8CDA9-BADF-4CF5-8B3B-702DE8EEA40B",
"versionEndExcluding": "6.18.16",
"versionStartIncluding": "6.13"
},
{
"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "373EEEDA-FAA1-4FB4-B6ED-DB4DD99DBE67",
"versionEndExcluding": "6.19.6",
"versionStartIncluding": "6.19"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}